CVE-2022-36780: Avdorcis Crystal Quality

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system: ip:port//V=2;ChannellD=number;Ext=number;Command=startLM;Client=number;Request=number;R=number number - id of the recorded number.

Affected products

• Avdorcis Crystal Quality: affected versions not specified

Published 2022-09-13. Last modified 2026-06-17.